>I've likewise make our LDAP server skip unknown controls, when marked >'not critical' on it's input, rather than just dropping the entire >request. I need some help to generate a correct error packet when it is >marked critical. You should just return LDAP_UNAVAILABLE_CRITICAL_EXTENSION. -- luke -- www.padl.com | www.lukehoward.com